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ABSTRACT 

Grover's algorithm is usually described in terms of the iteration of a compound operator of the form 
Q = —HIqHI Xq . Although it is quite straightforward to verify the algebra of the iteration, this gives 
little insight into why the algorithm works. What is the significance of the compound structure of 
Q? Why is there a minus sign? Later it was discovered that H could be replaced by essentially any 
unitary U . What is the freedom involved here? We give a description of Grover's algorithm which 
provides some clarification of these questions. 

INTRODUCTION 

Grover's quantum searching algorithm is usually described H || |lO| in terms of the 
iteration of a compound operator Q of the form 

Q = -HI HI X0 (1) 

on a starting state |V>o) = H\0). Here H is the Walsh-Hadamard transform and Io,I Xo are 
suitable inversion operators (c.f. below). [] Later it was discovered [9|, |ll| that H may 
be replaced by essentially any unitary operation U and using 

Q = -UI U- 1 I X0 \ipo) = U\0) (2) 

the searching algorithm still works just as well as before (with at most a constant slowdown 
in the number of iterations). At first sight this appeared remarkable since H is known to 
be singularly significant for other quantum algorithms [l], ||, [| . The efficacy of these other 
algorithms could be understood in terms of the fast Fourier transform construction || but 
Grover's algorithm appears to rest on different principles. Although it is quite straightfor- 
ward to work through the algebra of the algorithm || this provides little insight into 
why it works! The operator — HIqH was originally called a "diffusion" operator Q and 
later interpreted as "inversion in the average" [Q] but neither of these appears to provide 
much heuristic insight (especially in the context of the more general eq. @). What is the 
significance of the particular compound structure of Q for a searching problem? What is 
the significance of the minus sign in Q? Why can H be replaced by an arbitrary U - what 
is the freedom involved here? The purpose of this note is to give a different description 
of Grover's algorithm which provides some clarification of these issues. We will show that 
the algorithm may be seen to be a consequence of the following elementary theorem of 
2-dimensional real Euclidean geometry: 

1 This Q is the one used in [ju^. Grover |j, Q uses instead Q GR = —IoHI xo H iterated on |-0o) = |0) 
which is clearly an equivalent process. 
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Theorem 1: Let Ml and M2 be two mirror lines in the Euclidean plane IR 2 intersecting 
at a point O and let a be the angle in the plane from Ml to M2. Then the operation of 
reflection in Ml followed by reflection in M2 is just rotation by angle 2a about the point 
O. 



M2 




Ml 



Figure 1. Reflection in Ml followed by reflection in M2 is equivalent to rotation about O through 
angle 2a. 

THE SEARCH PROBLEM 

The search problem is often phrased in terms of an exponentially large unstructured 
database with N = 2 n records, of which one is specially marked. The problem is to locate 
the special record. Elementary probability theory shows that classically if we examine k 
records then we have probability k/N of finding the special one so we need O(N) such trials 
to find it with any constant (independent of N) level of probability. Grover's quantum 
algorithm achieves this result with only 0(y/~N) steps (or more precisely 0{^/N) iterations 
of Q but 0(\^N log N) steps, the logiV term coming from the implementation of H.) It 
may be shown ]l2| that the square root speedup of Grover's algorithm is optimal within 
the context of quantum computation. 

The search problem may be more accurately phrased in terms of an oracle problem, 
which we adopt here. In the description above, there is a potential difficulty concerning 
the physical realisation of an exponentially large unstructured database. One might expect 
that it will require exponentially many degrees of freedom of some physical resource, such as 
space, and consequently it may need exponential (i.e. O(N)) effort or time just to access a 
typical (remotely lying) record. We will replace the database by an oracle which computes 
an n bit function / : B n — > B (where B = {0,1}). It is promised that f(x) = for 
all n bit strings except exactly one string, denoted xq (the "marked" position) for which 
f(xo) = 1. Our problem is to determine xq. We assume as usual that / is given as a unitary 
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transformation Uf on n + 1 qubits denned by 



U f \x) \y) 



x) \y@f(x)) 



(3) 



Here the input register \x) consists of n qubits as x ranges over all n bit strings and the 
output register \y) consists of a single qubit with y = or 1. The symbol © denoted addition 
modulo 2. 



Figure 2. The action of Uf on a general basis state |x) \y) of the input and output registers. 

The assumption that the database was unstructured is formalised here as the standard 
oracle idealisation that we have no access to the internal workings of Uf - it operates as 
a "black box" on the input and output registers. In this formulation there is no problem 
with the access to f(x) for any of the exponentially many x values and indeed we may also 
readily query the oracle with a superposition of input values. 

Instead of using Uf we will generally use an equivalent operation denoted I XQ on n 
qubits. It is defined by 



i.e. I XQ simply inverts the amplitude of the \xo) component. If xq is the n bit string 00 ... 
then I XQ will be written simply as Iq. 

A black box which performs I XQ may be simply constructed from Uf by just setting the 
output register to ^(|0) — Then the action of Uf leaves the output register in this 

state and effects I XQ on the input register^: 

2 Note that, conversely, Uf may be constructed from the a black box for I XQ as follows. Let J XQ denote 
the operation "/„,„ controlled by the output qubit" . Apply H to the output register, then J XQ to the input 
and output registers, then H again to the output register. The total effect is just Uf on the n+1 qubits of 
both registers, as the reader may verify. To construct J XQ from I XQ we also need an eigenstate of I X(r The 
construction is described in O] or fl. 



x) 



x) 
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\y) 



y ©/(«)> 




(4) 



3 



|o)-|i) 





Uf 













|o)-|i) 



Figure 3. Construction of I Xo from Uf. Here is any n-qubit state. 



Our searching problem becomes the following: we are given a black box which computes 
I xo for some n bit string xq and we want to determine the value of xq. 
REFLECTIONS ON REFLECTIONS 

We first digress briefly to record some elementary properties of reflections which will 
provide the basis for our interpretation of Grover's algorithm. 
In two real dimensions: 

In real 2 dimensional Euclidean space, let M be any straight line through the origin specified 
by a unit vector v perpendicular to M. Let I v denote the operation of reflection in M. Note 
that if u is any vector we may write it uniquely as a sum of components parallel and 
perpendicular to u. If v 1 - is a unit vector lying along M then we have 

u = av + bv x 

and I v simply replaces a by —a. 
In N complex dimensions: 

Note that I v is exactly like I xo in eq. (|j) above except that there, we were in a complex 
space of higher dimension. We may interpret I Xo as a reflection in the hyperplane orthogonal 
to \xo). In terms of formulas, to reflect the xo amplitude we have 

I xo = I- 2 | ar ) {xo\ (5) 
where I is the identity operator. More generally if \ip) is any state we define 

/ W =J-2|V) (VI (6) 

Then is the operation of reflection in the hyperplane^] orthogonal to \ip). For any state 
\x) we may uniquely express it as a sum of components parallel and orthogonal to and 
simply inverts the parallel component. 

We have the following simple properties of I^y. 
Lemma 1: If \x) is any state then Lm preserves the 2-dimensional subspace S spanned by 
|x) and 

3 More generally, for any subspace D we may define In by Id = I — |d) (d| where {\d)} is any 

ortho-normal basis of D. Then In is reflection in the orthogonal complement D x of the subspace D. 
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Proof: Geometrically, S and the mirror hyperplane are orthogonal to each other (in the 
sense that the orthogonal complement of either subspace is contained in the other subspace) 
so the reflection preserves S. Alternatively in terms of algebra, eq. (||) shows that Lm takes 
to — \ip) and for any \x), it adds a multiple of to |x). Hence any linear combination 
is mapped to a linear combination of the same two states □. 
Lemma 2: For any unitary operator U 

Proof: Geometrically we are just changing description (reference basis) by U~ 1 but the 
result is also immediate from eq. @: 

UI m U- 1 =I-2U |V) (VI U- 1 = I - 2 |C/V) (Utl>\ = I um □. 

Looking back at eq. @ we see that 

Q = -Iu\0)I\x ) (7) 

Back to two real dimensions: 

By lemma 1, both I XQ and preserve the two dimensional subspace V spanned by \xq) 
and U |0) . Hence by eq. ([?]), Q preserves V too. Now we may introduce a basis {|ei) , \e2)} 
into V such that U |0) and |xo) up to an overall phase, have real coordinates. Indeed 
choose | ei ) = U \0) so U\0) has coordinates (1,0). Then e 1 ^ \xq) = a\e±) + b\e2) where 
\e2), orthonormal to |ei), still has an overall phase freedom. Thus choose £ to make a real 
and the phase of \e2) to make b real. Then in this basis, since U\0) and \xq) have real 
coordinates, the operators I XQ and Iu\o) when acting on V, are also described by real 2 by 2 
matrices - in fact they are just the real 2 dimensional reflections in the lines perpendicular 
to |xo) and U\0) in V. Finally we have: 
Lemma 3: For any 2 dimensional real v we have 

— I V = I V J- 

where v ± is a unit vector perpendicular to v. 

Proof: For any vector u we write u = av + bv^~. Then I v just reverses the sign of a and 
—I v reverses the sign of b. Thus the action of —I v is the same as that of I v x □. 

Later, this lemma will explain the significance of the minus sign in eq. (0). For the 
present, note that from eq. (0) we can write 

Q = / h> / |x' > 

where \ w) is orthogonal to U |0) and lies in the plane of U |0) and \xq). Since we are working 
with real coordinates, theorem 1 shows that Q, acting in V, is just the operation of rotation 
through angle 2a where a is the angle between \w) and \xo) i.e. cos a = (xq\w). Since U |0) 
is perpendicular to \w) we can write sin a = (xo\U\0). 

GROVER'S ALGORITHM 
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We now give an interpretation of the workings of the quantum searching algorithm in 
view of the preceeding simple facts about reflections. Given the black box I XQ how can we 
identify xq? Surely we must apply I xo to some state (we can do nothing else with a black 
box!) but there seems no reason a priori to choose any one state rather than any other. So 
let us just choose a state \w) at random. \w) may be written as U |0) where U is chosen at 
random. 

Now by lemma 1, I XQ preserves the subspace spanned by \w) and \xo) and by theorem 1, 
I\ W )I X0 provides a way of moving around in this subspace - it is just rotation by twice the 
angle between \xo) and (Note that L w \ may be constructed via lemma 2 as UIqU .) 
The idea now is to try to use this motion to move from the known starting state \w) towards 
the unknown \xq). This process has been called "amplitude amplification" & 11] as we are 



effectively trying to enhance the amplitude of the \xq) component of the state. Once we 
are near to \xq) then a measurement of the state in the standard basis {\x}} will reveal the 
value of xq with high probability. 

However there is an apparent problem: we do not know xq so we know neither the angle 
j3, between \xq) and \w), nor the angle 2(3 of rotation of L W \I XQ . Hence we do not know how 
many times to apply the rotation to move \w) near to \xq). Remarkably we can solve this 
problem by using the extra information that \xq) is known to be a member of a particular 
basis {\x)} of N orthonormal states! If we choose 



\ w o) 



£k> (8) 



to be a uniform superposition of all the \x)'s then whatever the value of xq is, we have that 
(xo\wq) = and hence we will know that the angle (3 is given by cos (3 = ^= in every 
possible case! Note that for large N (the usual case of interest) \xq) and \wq) are nearly 
orthogonal so 2(3 is near to tt. This will typically be the case for any \w) chosen at random 
in a large Hilbert space - it will tend with high probability to be nearly orthogonal to any 
previously fixed state such as \xq). 

Now, L W \I XQ rotating through nearly n, acts rather wildly on the space, moving vectors 
through a great distance and we would prefer to have a gentler incremental motion of \wo) 
towards \xo). One way of doing this is to use instead, the operation (I\ WQ \I Xo ) 2 rotating 
through 4(3 which is near to 2ir i.e. mod 2ir. Since cos (3 = -7= we have that 4(3 mod 
2ir is 0(-t=). (To see this, write (3 = \ — a so sin a = cos (3 = -7=. Then 4(3 = 2n — 4a 
and a ~ ^= for large N). Now the angle between \wq) and \xq) is nearly tt/2 so we will 

need 0(y/~N) iterations of this rotation to move \wq) near to \xq). A second way of dealing 
with the large (3 problem - the way actually used in Grover's algorithm - is to simply put a 
minus sign in front of L Wo \I Xo \ This explains the role of the minus sign in eq. @. Indeed by 

lemma 3, —I\ w )I Xo = I^ w j_^I Xo where Wq^J is orthogonal to \wo) in the subspace spanned by 
\wq) and \xq) and now the angle a between Wq) and \xq) is given by cos a = (xolwr 1 ) i.e. 



sin a = (xq\w) so a k -^=. Again we will need 0(yN) iterations of the rotation —I Wo I Xo 
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through 2a to span the angle between \wo) and |xo). 

In conclusion, we choose the starting state |w;o) of eq. (||) and apply 0(V~N) times, the 
operator 

D — T . T — T. T — TTT-TT- 1 , 



Q = ^U x \^o = -I\w )Ix = -UIqU I x 



where U is any unitary operation with U |0) = \wq) (for example U = H). The significance 
of the minus sign (in the context of reflection operations) is to convert a nearly orthogonal 
pair of directions to a nearly parallel pair (c.f. lemma 3) . The composite structure of Q 
is just to build a rotation as a product of two reflections (c.f. theorem 1) and the random 
choice of U just picks a random starting state in the two dimensional subspace, which is then 
moved towards \xq). The exact number of iterations of Q required depends on knowledge of 
the angle between \xq) and U |0). If U |0) = |^o) = 77^ 2~2 X \ x ) then this is explicitly known, 
but if U is chosen more generally at random then we will not know this angle. However Q 
will still generally be a small rotation through some angle of order 0(-^=) but we will not 
know when to stop the iterations. Nevertheless the process will still move U |0) near to |xo) 
in 0(\fN) steps. It will fail only in the unlikely situation that the randomly chosen XJ\Q) 
happens to be exactly orthogonal to the unknown \xq) (i.e. U has zero matrix element Uq Xq 
as noted in ||, ||). Q is then a rotation through an angle of zero. 

Having identified W as a rotation through 2a in the plane V of \xo) and \wq), where a 
is defined by 

sin a = — = (9) 
y/N 



(for the case that U \0) = \wq)) we may readily calculate the motion of \ipo) = \wq) 
-7= J2x \ x ) towards |xo) by iterated application of W. In V introduce the basis {|xo) 

where ) = 7^ Si^o Then from ec l- ® we S et 

|^o) = sin a \xq) + cos a Xq 

If we write 

\ip n+ i) = Q\ip n ) and \ip n ) = sina n \x ) + cosa n Xq ^ 
then we immediately get from the interpretation of Q as a rotation through 2a 

a n +i = a n + 2a i.e. a n = (2n + l)a 



giving the solution of the iteration derived in |1C]. For a more general choice IV'o) = \w) oi 



starting state, the value of a, given by sin -1 | (xq\w) |, will generally be unknown but the 
application of W still increments the angle successively by 2a as above. The number of 
iterations is chosen to make a n as close as possible to ir/2. 
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